last updated: 2024/09/25

note: please view without line wrapping, eg. Firefox > about:config > plain_text.wrap_long_lines > false
credit: to @xmppuser in the Divested chat rooms for many of these

- Web Browsers
	- X25519 + ML-KEM-768
	- Test page here: https://pq.cloudflareresearch.com
	- Chrome 124 & other Chromium forks, desktop only
		- 116 has support too, disabled by default
		- https://blog.chromium.org/2023/08/protecting-chrome-traffic-with-hybrid.html
	- Vanadium 124.0.6367.82.1
		- https://grapheneos.org/releases#2024050300
	- Mulch 124.0.6367.113-1 and Mull 125.3.0-2
		- https://divestos.org/pages/news#2024-05
	- Firefox 124, disabled by default
		- Change `security.tls.enable_kyber` to `true` via `about:config`
		- Change `network.http.http3.enable_kyber` to `true` via `about:config`
		- https://bugzilla.mozilla.org/show_bug.cgi?id=1871629

- Messengers
	- iMessage, 2024-04
		- ECDSA/P-256 + ML-KEM-1024
		- https://security.apple.com/blog/imessage-pq3
	- Signal, 2023-09
		- X25519 + ML-KEM-1024
		- https://signal.org/blog/pqxdh
	- SimpleX 5.6
		- X25519 + sntrup761
		- https://simplex.chat/blog/20240314-simplex-chat-v5-6-quantum-resistance-signal-double-ratchet-algorithm.html
	- Tuta, 2024-03
		- X25519 + ML-KEM-1024
		- https://tuta.com/blog/post-quantum-cryptography
	- Zoom, 2024-05
		- X25519 + ML-KEM-768
		- https://news.zoom.us/post-quantum-e2ee

- Consumer VPN Services
	- Express VPN, 2023-10
		- TCP: ECDSA/P-521 + ML-KEM-1024
		- UDP: ECDSA/P-256 + ML-KEM-512
		- https://www.expressvpn.com/blog/lightway-post-quantum/
	- IVPN, 2023-08
		- Classic-McEliece-348864 + ML-KEM-1024
		- https://www.ivpn.net/blog/quantum-resistant-wireguard-connections-ivpn-apps/
	- Mullvad VPN, 2023-04
		- Classic-McEliece-460896 + ML-KEM-1024
		- https://mullvad.net/en/blog/stable-quantum-resistant-tunnels-in-the-app

- Other
	- OpenSSH
		- ntrup since 8.5
		- X25519 + sntrup761 default since 9.0
		- X25519 + ML-KEM-768 optional since 9.9
		- https://www.openssh.com/releasenotes.html
	- TinySSH
		- X25519 + sntrup761
		- https://tinyssh.org/
	- Fedora/Red Hat crypto-policies, experimental
		- https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/1e3a2e499877c6c1d1438459aa1049942c305698
		- best on F41 and higher, breakage on F40, silent breakage on F39
		- To enable:
			- dnf install oqsprovider
			- follow https://github.com/open-quantum-safe/oqs-provider/blob/main/USAGE.md#configuration-file
			- update-crypto-policies --set DEFAULT:TEST-PQ
	- Rosenpass
		- Classic-McEliece-460896 + ML-KEM-512
		- https://rosenpass.eu/whitepaper.pdf
	- OpenIKED
		- X25519 + sntrup761
		- https://ftp.openbsd.org/pub/OpenBSD/OpenIKED/openiked-7.0-relnotes.txt